commit e9044cccf2af34685bb508ac04d1eea69c528a86
author Treehugger Robot <treehugger-gerrit@google.com> Thu Jul 15 15:10:04 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Jul 15 15:10:04 2021 +0000
tree b8c8fd21afb8f04cc0cbca09cc46c33b25f230e1
parent 05da332fe5dbdc2248b511b96cdcddbb714cb1c3
parent 73a7d9433e742cce85bb5bf733610b573dda2d06

Merge "Set umask in compos_key_cmd."

compos/compos_key_cmd/compos_key_cmd.cpp

diff --git a/compos/compos_key_cmd/compos_key_cmd.cpp b/compos/compos_key_cmd/compos_key_cmd.cpp
index 5047a48..3fe843a 100644
--- a/compos/compos_key_cmd/compos_key_cmd.cpp
+++ b/compos/compos_key_cmd/compos_key_cmd.cpp
@@ -232,6 +232,9 @@
 }
 
 int main(int argc, char** argv) {
+    // Restrict access to our outputs to the current user.
+    umask(077);
+
     if (argc == 4 && argv[1] == "--generate"sv) {
         auto result = generate(argv[2], argv[3]);
         if (result.ok()) {